Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/c7d22b-2147-4336-9009-f9355fd98b6b/1/W2c0Iu_35BxeBteOUp9JH1kVD_k.mft
File: W2c0Iu_35BxeBteOUp9JH1kVD_k.mft (raw, json)
Hash identifier: O19Jma3b3TRIWHAJZ4/aShTiW1Mj6JcAZklKBc70FKQ=
Subject key identifier: 73:10:7A:95:B2:0F:A8:30:D6:18:BC:43:42:7E:0F:5F:28:AE:61:52
Authority key identifier: 5B:67:34:22:EF:F7:E4:1C:5E:06:D7:8E:52:9F:49:1F:59:15:0F:F9
Certificate issuer: /CN=5b673422eff7e41c5e06d78e529f491f59150ff9
Certificate serial: 019680227419874890F11A4691AA6948EAF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2c0Iu_35BxeBteOUp9JH1kVD_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/c7d22b-2147-4336-9009-f9355fd98b6b/1/W2c0Iu_35BxeBteOUp9JH1kVD_k.mft
Manifest number: 1255
Signing time: Tue 29 Apr 2025 06:01:03 +0000
Manifest this update: Tue 29 Apr 2025 06:01:03 +0000
Manifest next update: Wed 30 Apr 2025 06:01:03 +0000
Files and hashes: 1: W2c0Iu_35BxeBteOUp9JH1kVD_k.crl (hash: T/FZYyyYnRqcWUpHFPNxBSn7pVUqeGoNwyt5caLsAAk=)
2: f2eeaIi_NtiLs6nRUcClmpkBy5k.roa (hash: 8pw5kFZ35WiQs2DDHCW04FDgssajvxmkQJ4ITw5fsyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/c7d22b-2147-4336-9009-f9355fd98b6b/1/W2c0Iu_35BxeBteOUp9JH1kVD_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/c7d22b-2147-4336-9009-f9355fd98b6b/1/W2c0Iu_35BxeBteOUp9JH1kVD_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/W2c0Iu_35BxeBteOUp9JH1kVD_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:22:74:19:87:48:90:f1:1a:46:91:aa:69:48:ea:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b673422eff7e41c5e06d78e529f491f59150ff9
Validity
Not Before: Apr 29 06:01:03 2025 GMT
Not After : Apr 30 06:01:03 2025 GMT
Subject: CN=73107a95b20fa830d618bc43427e0f5f28ae6152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ab:32:7a:88:9e:4c:86:6c:51:31:e8:7c:34:
e3:8b:ce:fc:2f:ca:96:29:ee:83:92:b3:1e:f4:26:
61:41:bc:42:c8:82:5d:8d:69:f6:28:04:01:a0:41:
38:f0:64:fe:9d:08:a0:48:6d:46:b7:80:c7:ba:24:
96:ea:4e:50:34:53:15:d3:88:27:f5:2d:56:0c:94:
eb:59:c6:ba:b8:14:8a:de:45:34:e7:d3:16:22:1c:
74:52:f5:33:9e:95:4d:3b:19:36:62:dd:d6:0b:a1:
d0:5a:bb:d5:ef:ad:18:96:a4:c4:a1:23:92:d4:f5:
33:2a:99:ac:dc:12:be:6f:21:00:41:39:ed:cc:35:
ec:fa:35:40:b5:11:08:1d:5b:d8:82:ea:65:12:87:
68:6e:1b:1d:06:4b:e9:6c:89:92:57:93:9e:55:95:
34:ff:26:14:68:89:c0:79:a9:04:c6:ed:4a:3d:f6:
34:a1:51:cb:7e:60:f6:bb:22:fd:ab:7a:5a:a9:10:
af:d1:7d:45:88:fb:c3:b8:57:14:8b:78:52:5a:7f:
66:42:1c:4e:f3:17:80:9f:de:c6:42:14:07:4f:df:
d0:b7:f9:d5:ed:9e:27:14:07:63:a3:81:5b:1e:d6:
09:17:e8:0a:37:10:b3:4f:12:c3:45:c1:66:7e:d5:
6f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:10:7A:95:B2:0F:A8:30:D6:18:BC:43:42:7E:0F:5F:28:AE:61:52
X509v3 Authority Key Identifier:
keyid:5B:67:34:22:EF:F7:E4:1C:5E:06:D7:8E:52:9F:49:1F:59:15:0F:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2c0Iu_35BxeBteOUp9JH1kVD_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c7d22b-2147-4336-9009-f9355fd98b6b/1/W2c0Iu_35BxeBteOUp9JH1kVD_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c7d22b-2147-4336-9009-f9355fd98b6b/1/W2c0Iu_35BxeBteOUp9JH1kVD_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:6b:e0:b4:57:18:f0:24:fc:25:c3:17:2b:69:0e:5e:26:7b:
ef:4d:f3:35:4f:a8:76:58:26:63:b7:88:8d:cd:57:45:ea:4e:
39:d5:66:40:90:48:3b:a7:f1:b4:59:0d:41:39:a0:02:d3:d3:
f0:d6:ed:98:16:d4:2b:9e:1a:84:a6:cd:46:18:ef:c5:60:71:
65:9e:fb:c8:05:91:a7:d4:76:3a:9b:68:c4:20:36:a3:0b:19:
7b:74:17:e1:f8:a1:ba:f9:e6:ce:2d:21:0d:98:3e:c5:09:84:
1f:48:b6:c9:17:64:c2:94:9b:49:9a:09:56:aa:24:2f:7d:3d:
e2:75:56:ab:b6:35:e9:26:a0:59:c1:38:14:d6:d5:59:d4:6b:
35:a9:79:b3:20:1b:e5:ba:c0:ac:be:40:c3:07:a8:25:f9:f9:
25:a6:bd:eb:f4:19:43:98:da:96:10:37:52:82:e7:f4:87:2f:
7c:88:f1:6f:02:a1:a9:5d:97:5e:36:35:a3:db:82:de:86:69:
5b:67:07:ec:af:f4:63:d4:8a:42:94:20:99:8d:5f:ea:a3:25:
c4:9d:cc:aa:82:2d:c1:76:05:ad:76:1a:a9:05:45:18:5f:c7:
d4:7f:b5:36:8e:dd:bc:0e:03:ef:7f:1e:6b:bd:03:bf:d1:d3:
c0:6c:9f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:44:03 2025 by rpki-client